1 00 17328- 1 

Richard L. S'c hertz,' et al. 
System and Method of Graphically Displaying 
Data for an Intrusion Protection System 


REPLACEMENT 
SHEET 


4/4 


FIG. 5 


L^> HP Netaction Attack Defender 


File View Help 


HP Attack Defender 



System | 


Intrusions 


Attacks 


Recon 


SvcMgmt ~M 


Policy 1 


Reports | 


urn 


/ 

120 


122-^*" V^I££L«^ V§t°P 
Detailed Results 

Ping of Death: 1 of 1 Prevented 


Signature: (icmp) & (65535 < (( iip[2:2]i - ((ip[0:1] OxOf) * 4)) 
+ ((ip[6:2]_0x1fff) * 8)))) S : ^V 10 2 

110 luz 

ETHER Header 

ETHER: Destination: Accton-9A-0C-61 (00-00-E8-9A-0C-61) 

ETHER: Source: 00-C0-4F-14-9D-81 

ETHER: Protocol: IP M04 
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IP Header 

Version = 4 
Header length = 20 

Differentiated Services (DS) Field = 0x00 
0000 00.. DS Codepoint = Default PHB (0) 

IP; ...... 00. Unused 

IP: Packet length = 1500 (1372 bytes missing) -\ 
IP: Id " = "TQei 

IP: Fragmentation Info = 0x1 FCC 

.0 Don't Fragment Bit 

. . 0 More Fragments Bit 
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= FALSE 
= FALSE 


...1 1111 1100 1100 Fragment offset = 65120 
Time to live = 255 
Protocol = ICMP (1) 
Header checksum = 7066 
Source address = 10.1.1.2 
Destination address = 10.0.0.11 
Continuation of a missing packet 
114 

0000: 00^)00 E8 9A 0C 61 00 CO - 4F 14 9D 81 08 00 45 00 
0010: 1 05 DC MO E1 1F CC FF 01 
0020: 66 OB 00 00 00 00 00 00 
0030: 00 00 00 00 00 00 00 00 
0040: 00 00 00 00 00 00 00 00 
0050: 00 00 00 00 00 00 00 00 
0060: 00 00 00 00 00 00 00 00 
0070: 00 00 00 00 00 00 00 00 
0080: 00 00 00 00 00 00 00 00 
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70 66 OA 01 01 02 OA 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 
00 00 00 00 00 00 


